This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft File: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft (raw, json) Hash identifier: eD04LhjXCqnRTLigZ9MN1MF6G1UW5nH/A0mVhvRuYBo= Subject key identifier: 65:D4:40:39:60:3C:FE:03:13:3E:CE:37:72:95:D6:6C:0F:BF:BE:99 Authority key identifier: FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 Certificate issuer: /CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Certificate serial: 27964B2B5D87470682F5595BCDA072970B0B4AB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft Manifest number: D0 Signing time: Sun 07 Dec 2025 03:21:53 +0000 Manifest this update: Sun 07 Dec 2025 03:16:53 +0000 Manifest next update: Wed 10 Dec 2025 12:45:53 +0000 Files and hashes: 1: FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl (hash: ABlKHPYDjm+QiCUW31LwzXxd0LrdnU1ntFXe7gYhDlM=) 2: 3136302e32352e3235302e302f32342d3234203d3e20313533303938.roa (hash: MrtKeNjFNhl14mhfxKI/GhEb/0ohG0B8bmQ7SLXWttE=) 3: 3136302e32352e3235302e302f32332d3233203d3e20313533303938.roa (hash: eL66HCHXLPzvvpIp6yZbwohxEw2vNNGKLUjoRHRX4l0=) 4: 3136302e32352e3235312e302f32342d3234203d3e20313533303938.roa (hash: +X50gpeSdWT/Y5d22C2/uBOgo8Xzo2+UIRSSAuVLkyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:96:4b:2b:5d:87:47:06:82:f5:59:5b:cd:a0:72:97:0b:0b:4a:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBC39A6E177F8DD7BA5E257D4489C57574C07E81 Validity Not Before: Dec 7 03:16:53 2025 GMT Not After : Dec 10 12:45:53 2025 GMT Subject: CN=65D44039603CFE03133ECE377295D66C0FBFBE99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:12:f0:3e:51:88:cf:70:e0:0b:2e:ed:5a: 97:24:cb:26:9f:03:68:7c:02:29:3e:aa:9e:e9:71: a5:79:ea:40:dd:9b:16:1f:8f:a0:52:96:00:2d:31: 6d:31:c0:d7:f4:8a:f5:3c:87:b1:23:83:e7:f0:7d: 91:7e:08:bf:dc:4f:e6:45:c6:45:10:7e:93:60:0f: 95:f7:8b:98:0f:65:07:20:2f:8d:6b:60:c3:86:9d: b4:28:95:24:2f:ca:af:b2:e2:83:59:f5:6d:aa:07: 0c:56:3a:c4:89:25:27:1c:dd:af:4c:3a:9e:39:9a: 0c:37:4e:1f:f2:9a:57:87:2c:52:69:48:f3:12:93: 9b:dc:a9:07:37:50:32:6d:fe:97:2b:9f:a3:2a:fe: fc:3c:b7:d7:fb:f3:65:f7:65:42:18:80:12:6b:54: fe:30:83:4d:40:79:d4:ec:7f:28:8d:8a:05:0f:67: c9:d4:c7:b5:83:5d:55:bd:93:35:db:ee:dd:b0:d4: 61:9d:6e:c8:7c:56:c0:85:dd:56:2e:23:89:b3:45: e8:0b:ed:6e:22:ed:82:fb:33:38:aa:0b:e8:c5:10: 74:85:b8:23:e4:bb:eb:eb:f8:22:bb:8e:06:bc:62: d8:16:92:5f:2a:54:57:69:a0:61:61:b1:34:75:81: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D4:40:39:60:3C:FE:03:13:3E:CE:37:72:95:D6:6C:0F:BF:BE:99 X509v3 Authority Key Identifier: keyid:FB:C3:9A:6E:17:7F:8D:D7:BA:5E:25:7D:44:89:C5:75:74:C0:7E:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47ad0a3a-26b8-449a-88ec-bf0398ea53a6/0/FBC39A6E177F8DD7BA5E257D4489C57574C07E81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a8:22:10:8e:6d:27:31:1c:cc:bf:af:4e:d9:b0:0e:84:b8: 08:75:b7:37:45:95:ed:75:b7:8d:50:9d:74:c7:27:21:ca:43: 7f:09:38:48:a1:66:f8:04:31:ee:56:f4:e0:41:29:a0:e2:6a: 5f:9a:bf:a3:f1:d9:d2:77:fd:31:59:d8:21:63:94:1c:4a:4f: a1:65:18:1e:ee:c7:db:58:57:d1:ae:08:0a:b9:1b:7e:47:53: 26:39:40:6f:be:d9:20:e8:81:59:c6:6b:04:02:6e:62:a5:42: 5b:c7:66:03:4a:39:7b:6d:9d:f0:59:84:b7:36:d2:e4:bf:f1: ac:6c:e4:6f:6d:b1:0d:75:be:96:fa:c0:28:82:82:59:d5:e5: 47:06:c3:82:7b:81:bb:63:42:25:f7:64:d2:6d:36:34:99:e6: d3:fb:43:0d:a5:09:5f:7a:dd:fd:6a:cc:7b:7c:55:07:79:8c: b1:d4:3c:5d:07:e4:f3:38:44:00:0e:13:07:ba:52:5a:97:3e: d6:30:64:93:cc:7b:d8:b9:5b:66:e7:e3:c5:0e:ed:20:62:c0: 93:0a:01:23:b7:ce:30:e0:80:7a:fa:38:75:29:b2:03:69:aa: c2:e0:af:3a:7f:7d:77:f4:c3:9f:72:df:8c:7f:64:2a:a2:30: b4:ca:c0:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ5ZLK12HRwaC9VlbzaBylwsLSrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3 NEMwN0U4MTAeFw0yNTEyMDcwMzE2NTNaFw0yNTEyMTAxMjQ1NTNaMDMxMTAvBgNV BAMTKDY1RDQ0MDM5NjAzQ0ZFMDMxMzNFQ0UzNzcyOTVENjZDMEZCRkJFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYphLwPlGIz3DgCy7tWpckyyaf A2h8Aik+qp7pcaV56kDdmxYfj6BSlgAtMW0xwNf0ivU8h7Ejg+fwfZF+CL/cT+ZF xkUQfpNgD5X3i5gPZQcgL41rYMOGnbQolSQvyq+y4oNZ9W2qBwxWOsSJJScc3a9M Op45mgw3Th/ymleHLFJpSPMSk5vcqQc3UDJt/pcrn6Mq/vw8t9f782X3ZUIYgBJr VP4wg01AedTsfyiNigUPZ8nUx7WDXVW9kzXb7t2w1GGdbsh8VsCF3VYuI4mzRegL 7W4i7YL7MziqC+jFEHSFuCPku+vr+CK7jga8YtgWkl8qVFdpoGFhsTR1gR9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZdRAOWA8/gMTPs43cpXWbA+/vpkwHwYDVR0j BBgwFoAU+8Oabhd/jde6XiV9RInFdXTAfoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2FkMGEzYS0yNmI4LTQ0OWEtODhlYy1iZjAzOThlYTUzYTYvMC9GQkMzOUE2RTE3 N0Y4REQ3QkE1RTI1N0Q0NDg5QzU3NTc0QzA3RTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1NzU3NEMw N0U4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdhZDBhM2EtMjZiOC00NDlhLTg4 ZWMtYmYwMzk4ZWE1M2E2LzAvRkJDMzlBNkUxNzdGOEREN0JBNUUyNTdENDQ4OUM1 NzU3NEMwN0U4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuoIhCObScxHMy/r07ZsA6EuAh1tzdFle11 t41QnXTHJyHKQ38JOEihZvgEMe5W9OBBKaDial+av6Px2dJ3/TFZ2CFjlBxKT6Fl GB7ux9tYV9GuCAq5G35HUyY5QG++2SDogVnGawQCbmKlQlvHZgNKOXttnfBZhLc2 0uS/8axs5G9tsQ11vpb6wCiCglnV5UcGw4J7gbtjQiX3ZNJtNjSZ5tP7Qw2lCV96 3f1qzHt8VQd5jLHUPF0H5PM4RAAOEwe6UlqXPtYwZJPMe9i5W2bn48UO7SBiwJMK ASO3zjDggHr6OHUpsgNpqsLgrzp/fXf0w59y34x/ZCqiMLTKwJ8= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:48 2025 by rpki-client